# MyChart patient portal phishing campaign

> Live situation record from CLSTR: https://clstr.news/situations/mychart-patient-portal-phishing-campaign
> Updated: 2026-08-31T04:31:04.000Z. Sources: 11. Developments: 2.

A widespread phishing campaign has emerged targeting users of the MyChart patient portal, owned by Epic Systems. The campaign utilizes deceptive emails, text messages, and phone calls that mimic legitimate MyChart branding to trick individuals into clicking malicious links or disclosing sensitive personal and financial information.

Scammers often use tactics such as promising free health packages, Medicare-related benefits, medical test results, or loyalty rewards to create a sense of urgency. The primary objective of these attacks is to install malware on victims' devices or facilitate identity theft.

Both St. Luke’s University Health Network and Pennsylvania officials issued warnings regarding the scam, noting that the MyChart platform itself has not been compromised. Instead, cybercriminals are exploiting the brand's high recognition. The scale of the campaign is significant, with reports indicating approximately 190 million MyChart users worldwide could be targeted. In the United States, various hospitals, including those in Florida, have issued alerts to their patients. Epic Systems has warned that the fraudulent communications are often disguised as medical test results or health rewards to exploit the high level of brand trust associated with the platform, which is used by 44 percent of the healthcare market.

## Claims

- US cancer centers are rationing the chemotherapy drug Ifosfamid using a three-stage system. (corroborated by 4 sources)
- The shortage was triggered by the suspension of production at a Baxter-contracted facility in Germany following inspection issues. (corroborated by 4 sources)
- It is currently unclear when production of the drug will fully recover. (corroborated by 4 sources)

## Timeline

### 2026-08-31: US cancer centers ration Ifosfamid due to drug shortage

US cancer centers are rationing the chemotherapy drug Ifosfamid due to a production halt in Germany. Meanwhile, a major phishing campaign is targeting 190 million MyChart users via fraudulent medical alerts.

9 sources. https://clstr.news/cluster/epic-systems-mychart-platform-targeted-by-massive-phishing-campaign

### 2026-08-28: St. Luke’s and Pennsylvania officials warn of MyChart phishing scam

St. Luke’s University Health Network and Pennsylvania officials are warning of a phishing scam using MyChart branding to steal personal information via fraudulent messages.

2 sources. https://clstr.news/cluster/st-lukes-and-pennsylvania-officials-warn-of-mychart-phishing-scam

---
Cite as: MyChart patient portal phishing campaign. CLSTR, https://clstr.news/situations/mychart-patient-portal-phishing-campaign